Product:

Cpanel

(Cpanel)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 415
Date Id Summary Products Score Patch Annotated
2019-08-02 CVE-2017-18426 cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288). Cpanel 2.7
2019-08-02 CVE-2017-18425 In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280). Cpanel 2.5
2019-08-02 CVE-2017-18391 cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval (SEC-323). Cpanel 2.5
2019-08-02 CVE-2017-18388 cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315). Cpanel 7.8
2019-08-01 CVE-2016-10858 cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64). Cpanel 9.8
2019-08-01 CVE-2016-10857 cPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60). Cpanel 6.5
2019-08-07 CVE-2016-10811 In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116). Cpanel 8.8
2019-08-07 CVE-2016-10810 In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115). Cpanel 8.8
2019-08-07 CVE-2016-10809 In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114). Cpanel 8.8
2019-08-07 CVE-2016-10807 cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112). Cpanel 6.5